Portfolio Monitoring That Never Sleeps

Tier 1

Cascade Warning

High confidence. Cross-default cascade risk detected across 2+ borrowers with connected exposure.

Routes to: pager credit committee

Response: within 24 hours

Calibrated to fire under 5x per quarter per 200-facility fund.

Tier 2

Storm Forming

Medium confidence. Single-borrower covenant ratio deteriorating, debt-service coverage dropping past warning threshold, unplanned capex mid-quarter.

Routes to: portfolio manager daily digest

Response: within 5 business days

Per-PM sensitivity controls tune the floor.

Tier 3

Watch

Low confidence. Early signals, single data-point drift, not yet indicative of stress. Logged for pattern detection.

Routes to: weekly portfolio summary

Response: no immediate action

Feeds quarterly sensitivity recalibration.

Tier 2 Density Cap

3 Signals Per Day. Hard Cap. No Digest Blindness.

A daily digest that bundles twelve lukewarm signals is just a junk drawer with a calendar. COVENANT caps the Tier 2 daily digest at the 3 most relevant signals per portfolio manager, with a steady-state guarantee of under 5 Tier 2 alerts per week.

When signal volume would exceed the cap, the system makes a hard decision: promote the highest-confidence candidate to Tier 1 (Cascade Warning, pager), or demote the lowest to Tier 3 (Watch, weekly digest). Never overflows.

In the alert preferences UI: "Your current digest is averaging 2.4 signals per day." The PM sees the cap working in real time.

Tier-2 Auto-Promotion Audit Log

Every Promote / Demote Decision Is Logged In The PM's Own Audit Trail

When the density cap forces a promote-or-demote, the system writes a structured audit row that the PM can re-open six months later. Confidence delta, alternatives considered, and a deep link to the underlying signal. Auto-triage logic stops being a black box.

During postmortem, the PM clicks audit_link and sees the full alert tree: which signals were considered, why this one beat them, what the confidence model weighted. If the model was wrong, the row is the receipt.

Conservative-By-Default

Sliders Ship Tuned For The Fiduciary, Not For The Vendor

COVENANT's per-PM sensitivity sliders ship with conservative defaults that catch roughly 95% of correlated breach signals as Tier 1. PMs can dial sensitivity down to fit their portfolio's volatility profile, but the factory default catches the "we should have been paged" cases where demoting a signal would later constitute a breach of fiduciary duty.

Every slider adjustment is logged, timestamped, and reasoned - the PM enters a short note. When the inevitable postmortem happens, the audit log answers "why was this signal demoted" with a dated reason in the PM's own words. The tuning tool is not a vendor liability shield. The defaults are the shield.

Before COVENANT

90% Boilerplate, 10% Judgment

Your senior analysts spend 90% of their day reading boilerplate covenants, parsing standard reporting submissions, and re-keying numbers from PDFs into spreadsheets. The judgment calls (workout decisions, structural risk reads, intercreditor tactics) get the last 10% of an exhausted brain.

After COVENANT

10% Boilerplate, 90% Judgment

The triage engine ingests, parses, ratios, and tier-classifies every submission. The senior analyst opens the day looking at a tier-1 shortlist of cascade-risk signals already enriched with the underlying ratios and clause references. The judgment work gets a fresh brain.

What Stays Human

Every Tier-1 Signal Acknowledged

Every Cascade Warning is acknowledged by a human portfolio manager who has final disposition authority. The triage engine never autonomously fires a workout call, never autonomously closes a borrower, never makes a credit decision without a human sign-off. Multiplier, not substitute.

COVENANT directs scarce human attention to the 20% that actively requires it, while fully automating the 80% that has clean data pipelines.

Every sub-A borrower ships with an auto-generated Path to A action list: "Re-negotiate reporting requirements in next amendment cycle," "Deploy Onboarding Wizard for this borrower," "Request API integration for upcoming refinancing." Portfolio coverage compounds as the action list closes out.

Parsing Confidence, Not Borrower Default

An F Means The AI Could Not Read The Document. It Does Not Mean The Borrower Defaulted.

The most common silent-failure mode in cloud covenant tools is conflating data quality with parsing confidence. A scanned PDF with a watermark looks identical to a scanned PDF that says "we breached our covenant" - if the parser fails on either, the system goes quiet. COVENANT refuses that conflation. Every F surfaces the precise failure mode and the action it triggers.

An F is a transparent admission that the radar could not see. The PM gets a named failure mode, a routing decision, and a tracked request. The system never goes silent on a borrower it cannot read.

Historical F-Grade Quarantine

One Click To Re-Parse Every Pre-v6 F-Grade With Named Failure Modes

The v6 parsing-confidence release made every new F-grade route to a named failure mode. F-grades issued before the release were silent on which failure mode caused them. The Quarantine Tool closes that gap. Turn the liability into a demonstration of customer care.

"Turn the liability into a demonstration of customer care." The forward-only fix becomes a portfolio-wide cleanup the PM can run before the next quarterly review.

Explainability Dashboard

A Single Glance Tells The Risk Officer Where The Radar Has Coverage

Open the portfolio view. The header is a coverage map: how much of the book is on clean pipelines, how much is delayed, how many borrowers the parser could not read, and how many compliance requests are outstanding right now.

Risk officers stop seeing "the radar found a breach." They start seeing "the radar covers 95% of the book and is actively closing the remaining 5%." The blind spot becomes a tracked metric, not a hidden liability.

F-Grade Resolution Workflow

The Radar Tells You Where The Blind Spot Is. Then The Workflow Closes It.

F-grade is a parse failure, not a borrower default. The student is not dumb, the paper is destroyed. When the engine quarantines a document, the resolution workflow walks the analyst from "we cannot read page 24" to a clean re-parse without spamming a key sponsor over a blurry scan.

"It is the ultimate admission that while the machine can scan the horizon, you still need a human to navigate the storm." The workflow keeps the analyst on the bridge, not in the engine room.

A-F Grading: Active Enforcement

True Risk Management Is Defined By How The System Behaves In The Dark

When a borrower hits a D or F grade, COVENANT does not wait. The system auto-generates a templated compliance-enforcement request to the borrower's CFO or CRO, referencing the specific contractual reporting obligations the borrower signed, requesting the missing data, and opening a tracked response timer.

Non-responsive borrowers surface as a daily Compliance Friction report on the PM dashboard, sorted by days-since-request and by underlying credit exposure. The 20% is not celebrated as a blind spot. The 20% is hunted until it becomes the 80%.

The companies with the worst financial-reporting hygiene are historically the first to default in a liquidity crisis. Active enforcement does not pretend otherwise; it goes and gets the data.

CISO Fast-Track Bridge

The Translation Layer, Not A Substitute For Institutional Audit

The COVENANT SOC 2 Equivalence Document is a CISO Fast-Track Bridge for early adopters: it translates the dedicated-infrastructure architecture into the vocabulary a cloud-era SOC 2 checklist already understands. It is not a substitute for an independent audit. It is the bridge that gets early-mover credit funds deployed while the independent audit completes.

Because borrower financial data routes only to dedicated infrastructure under NHN's exclusive control, with no third-party AI vendors and no cloud middlemen in the inference chain, the standard multi-tenant SaaS security risks are bypassed entirely. The architecture itself is the primary security control. The Bridge is the roadmap that proves the sovereign architecture requires a lower burden of proof.

Independent Big-4 SOC 2 Type 2 audit target: Q2 2027. Funded by founder-tier subscription revenue. Published on a public calendar so CISOs can plan around it rather than squint at a self-attested document.

See The Procurement Bridge Request The Bridge Packet →

SOC 2 Equivalence v2: Fortress Framing

We Are Not Safer Because We Passed The Checklist. We Are Safer Because We Don't Have The Cloud Problem.

SOC 2 was written for a world where the vendor holds your data. Every control on that checklist exists to govern how the vendor protects what they hold. COVENANT collapses the threat model by never holding the data in the first place. The structural answer is mathematically stronger than the checklist answer.

"Decentralizing the honeypot is mathematically safer than protecting a central target." A SOC 2 audit certifies the central target is well-protected. COVENANT eliminates the target.

Hardware EOL Flex Policy

"Why Are You Highlighting Hardware EOL If The Fund Never Touches Hardware?" Fair Question.

The fund never touches hardware. NHN owns and operates the dedicated infrastructure under our exclusive control; the fund connects via encrypted tunnel from authorized workstations. So what does the EOL Flex Policy actually mean to a fund procurement committee?

It means your subscription, on the flat $4,000 monthly rate or any founder-cohort tier (T1 at $1,449 per year through T5 at $3,499 per year), includes automatic zero-downtime compute upgrades at our facility when the underlying Mac hardware ages out. There is no CapEx surprise. There is no fund-side migration window. There is no hardware refresh you have to budget for.

Sovereign Guarantee. Hardware lifecycle risk lives with NHN. The fund's only obligation is the subscription. Procurement committees can underwrite the spend without modeling a hardware refresh cycle.